This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/SpICVub50OICM4yiQk6ulqnyBsU.roa File: SpICVub50OICM4yiQk6ulqnyBsU.roa (raw, json) Hash identifier: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI= Subject key identifier: 4A:92:02:56:E6:F9:D0:E2:02:33:8C:A2:42:4E:AE:96:A9:F2:06:C5 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 019C00B24CA34F35486BE8EEDDAF3A3445A2 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/SpICVub50OICM4yiQk6ulqnyBsU.roa Signing time: Tue 27 Jan 2026 18:23:30 +0000 ROA not before: Tue 27 Jan 2026 18:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209823 IP address blocks: 5.144.32.0/23 maxlen: 24 5.144.32.0/24 maxlen: 24 5.144.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:b2:4c:a3:4f:35:48:6b:e8:ee:dd:af:3a:34:45:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Jan 27 18:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a920256e6f9d0e202338ca2424eae96a9f206c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:9b:33:fa:0b:56:66:43:c0:3b:fc:c3:22: 29:0a:c9:b5:3c:f0:4d:b1:65:07:b5:5d:cb:12:a7: 25:6c:ae:d4:c4:63:88:3d:59:58:fd:15:93:55:aa: f0:10:ae:7d:57:df:e7:5a:fa:22:20:99:3b:93:6f: 81:67:31:4a:ef:5d:d3:bc:c9:33:51:94:8e:eb:f4: 53:ec:d3:a1:76:8c:ab:25:8e:63:ec:85:2a:0d:26: bd:ed:bf:e5:2d:2c:88:0c:ac:d9:76:ea:37:0f:a3: ed:ca:6d:35:77:d8:6a:4c:f1:01:32:86:c1:8b:7a: d4:3b:20:bd:cd:2d:fa:16:58:11:f7:d0:c7:81:36: 7a:8e:e0:42:a5:f9:b9:9d:92:17:5b:37:2f:7f:13: 00:6f:8d:af:2b:29:3f:9e:55:89:f6:2b:e1:3f:bf: 93:19:9c:75:08:31:b3:c7:56:76:bc:a6:e3:f4:41: ee:c3:07:2c:6a:d3:07:ba:09:d0:8c:f1:85:aa:ab: ce:7c:8c:1d:d0:41:43:a9:cd:4a:7e:ee:81:ca:4a: 78:c6:42:da:f2:4a:58:81:7c:21:5c:a2:31:bf:e8: b9:4c:b2:5f:b9:62:a1:01:a3:2e:99:b5:a6:e4:cc: 16:1c:6f:ae:cd:0e:d8:ec:c6:7a:72:80:26:d7:4e: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:92:02:56:E6:F9:D0:E2:02:33:8C:A2:42:4E:AE:96:A9:F2:06:C5 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/SpICVub50OICM4yiQk6ulqnyBsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.32.0/23 Signature Algorithm: sha256WithRSAEncryption 83:77:be:c9:62:41:8d:89:aa:b0:d8:3f:4f:83:e3:cb:93:d7: da:ab:87:52:37:c6:8d:b5:8d:53:0b:8a:a2:de:3c:e9:1f:33: cb:06:24:58:fb:cd:94:08:21:d3:c6:cf:c2:ff:cd:86:65:95: 99:b4:6b:9f:fe:bb:6d:e1:c4:37:39:69:64:50:84:b7:2f:9d: 90:9c:d9:38:68:bc:6d:4e:c9:0b:e1:de:47:0b:c0:9b:f4:8a: c7:1a:d9:4b:35:25:f7:48:af:19:c1:2b:22:20:ad:4a:28:29: 1f:fb:b9:c0:bb:a6:f5:38:c2:78:a8:16:be:8d:67:df:e3:f6: d2:59:01:5e:2a:46:93:a2:36:c2:6c:24:85:b3:9a:1a:d8:0f: 8e:76:ab:0e:a6:a3:45:76:05:25:dd:3f:f9:cf:da:f9:b3:50: 02:c5:e8:50:1b:f0:61:9c:d8:f3:74:9d:a3:36:0a:a8:6e:7f: 54:17:61:d6:3c:c7:7b:70:cc:8a:2b:b4:89:b8:16:0c:29:15: 9e:5a:db:6d:69:c8:24:95:d7:5c:52:f0:b6:64:0f:c9:fa:d1: 44:59:bc:a7:fd:a2:46:c8:98:54:e3:1e:db:d2:ea:20:b6:a9: fd:db:5e:15:22:12:22:25:12:ba:5c:71:1f:e6:84:58:51:d6: c7:a0:25:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwAskyjTzVIa+ju3a86NEWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwMTI3MTgyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTkyMDI1NmU2ZjlkMGUyMDIzMzhjYTI0MjRlYWU5NmE5ZjIwNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjmbM/oLVmZDwDv8wyIpCsm1PPBN sWUHtV3LEqclbK7UxGOIPVlY/RWTVarwEK59V9/nWvoiIJk7k2+BZzFK713TvMkz UZSO6/RT7NOhdoyrJY5j7IUqDSa97b/lLSyIDKzZduo3D6Ptym01d9hqTPEBMobB i3rUOyC9zS36FlgR99DHgTZ6juBCpfm5nZIXWzcvfxMAb42vKyk/nlWJ9ivhP7+T GZx1CDGzx1Z2vKbj9EHuwwcsatMHugnQjPGFqqvOfIwd0EFDqc1Kfu6Bykp4xkLa 8kpYgXwhXKIxv+i5TLJfuWKhAaMumbWm5MwWHG+uzQ7Y7MZ6coAm106lawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqSAlbm+dDiAjOMokJOrpap8gbFMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvU3BJQ1Z1YjUwT0lDTTR5aVFrNnVscW55QnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBZAgMA0G CSqGSIb3DQEBCwUAA4IBAQCDd77JYkGNiaqw2D9Pg+PLk9faq4dSN8aNtY1TC4qi 3jzpHzPLBiRY+82UCCHTxs/C/82GZZWZtGuf/rtt4cQ3OWlkUIS3L52QnNk4aLxt TskL4d5HC8Cb9IrHGtlLNSX3SK8ZwSsiIK1KKCkf+7nAu6b1OMJ4qBa+jWff4/bS WQFeKkaTojbCbCSFs5oa2A+OdqsOpqNFdgUl3T/5z9r5s1ACxehQG/BhnNjzdJ2j Ngqobn9UF2HWPMd7cMyKK7SJuBYMKRWeWtttacgklddcUvC2ZA/J+tFEWbyn/aJG yJhU4x7b0uogtqn9214VIhIiJRK6XHEf5oRYUdbHoCVo -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:49 2026 by rpki-client